2458518 - Report built on Time Account does not respect Role Based Permission (RBP)

Time Account Related Reports don't respect the same permission settings as seen in BizX UI.

For example, in this case the HR Admin has RBP permission to see only the records of users from a specific location based on the set target population.

The RBP permission & restriction is applied when accessing employee data via My employee file portlet. 

When HR Admin runs the Time Account Related Reports the RBP permission & restriction is not applied and the HR Admin is able to report on Time account data for any users.

SAP SuccessFactors HXM Suite

1. Create a query using the Advanced Reporting or Story
2. Select the Time Account object and add the respective fields 
3. In this example the HR Admin was able to report on Time Account data for users which could not access through the My Employee File portlet. 

You need to set up permissions for Time Account object & RBP to enable reporting for time accounts.

You can apply appropriate permissions to your time accounts in reporting by enabling the role-based permissions (RBP) for time accounts object and role as below:

1. Go to the Admin Center and choose Configure Object Definitions.
2. Choose the generic object Time Account.
3. Choose Take Action then Make Correction and apply these changes:
• Make the userId field required (this is the default anyway).
• In the security section, set Secured to Yes.
• Choose Miscellaneous Permissions or Time Management Object Permissions as the permission category.
• Enter userID in RBP Subject User Field.
  
4. Check that the permissions you entered match the settings you've made in the object. To do this, go to the Admin Center - Manage Business Roles - Choose the role of the user – Permissions – Miscellaneous/Time Management Object Permissions then scroll down in the list of objects until you see Time Account. Make sure the View permission is selected for reporting, but whatever you select, it must match what you selected in the time account object.
   

Further details are also available via the Setting Permissions for Time Account-Related Reports guide.

When such changes are made to an instance a Realms metadata refresh may be required and this process can be accomplished by the customer. See KBA 2776882 for reference.

ORD, Online Report Designer, Advanced Reporting, Realms, ODS, Time Account Data, Time management, object Security, Time object, Time Account Permission, Time Management Option Permissions , KBA , LOD-SF-ANA , Analytics & Reporting (Ad Hoc, YouCalc, ORD) , Problem